This program is not meant to be secure; all data goes over the network plain text, and with the ! command from the shell, the remote user is allowed to executy any perl code as the user under which this daemon is run.